indexdata/yaz

This release is usable but carries meaningful maintenance uncertainty. It has clear licensing, tests, build scaffolding, no install-time scripts, a stable version, an unarchived repository, and organization backing from Index Data. However, the registry history contains only one release with a package age of 0 days, and the repository records no commits or active maintainers in the last 3 months, so long-term maintenance cannot yet be established. The absence of a security policy and explicit workflow token permissions adds hygiene risk, though the analyzed workflow shows no dangerous patterns. Overall, this is a moderately healthy package with limited maturity evidence and should be adopted with normal dependency monitoring.

Latest v1.2.5Packagist

Health Score Breakdown

Release historycaution

Only one release is recorded and the package age is 0 days, leaving no demonstrated release cadence or maintenance track record.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the recent push timestamp.

Repo toolingcaution

Make and Composer are used for builds, but no security scanning tools are detected; the build process is present while security hygiene is limited.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The only workflow lacks top-level token permissions. It does not declare write access, but explicit least-privilege permissions would provide stronger CI security hygiene.

View all 15 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.